Hourglass Interactive App - Privacy Policy

1. What information do we collect?

Personal information you disclose to us

In short: We collect personal information that you voluntarily provide to us.

We collect personal information when you register on our services, express interest in our products, participate in activities on our services, or contact us.

The personal information we collect may include contact or authentication data.

Sensitive information. We do not process sensitive information.

Payment data. If you make purchases, payment data is handled and stored by the App Store. Their privacy notice is available at apple.com/legal/…/stdeula.

Application data. We may request access to your device's local notifications and calendar to maintain the operation of the app. You can change these permissions at any time in your device settings.

2. How do we process your information?

In short: We process your information to provide and improve our services, communicate with you, and comply with the law.

• Account creation and authentication — so you can create and log in to your account.
• Vital interest protection — when necessary to prevent harm.

3. What legal bases do we rely on?

In short: We only process your information when we have a valid legal reason to do so.

If you are in the EU or UK: we rely on the following bases under GDPR/UK GDPR:

• Consent — you can withdraw at any time.
• Legal obligations — compliance with applicable law.
• Vital interests — to protect your safety or that of a third party.

If you are in Canada: we process your information with your express or implied consent, or in specific exceptional cases permitted by law without consent (fraud prevention, legal proceedings, journalistic or literary purposes, etc.).

4. When and with whom do we share your information?

In short: We may share information in specific situations with specific third parties.

• Business transfers — in connection with a merger, sale, or acquisition of all or part of our business.

5. Do we offer AI-based products?

As part of our services, we may offer features powered by artificial intelligence or machine learning — specifically AI insights. All personal information processed using these tools is handled in line with this privacy notice and our agreements with third parties.

6. How long do we keep your information?

In short: We keep your information for as long as necessary to fulfill the purposes in this notice, unless required otherwise by law.

We retain personal information only for as long as you have an active account with us. When we no longer have a legitimate need to process your information, we will delete or anonymize it.

7. How do we keep your information safe?

In short: We implement appropriate technical and organizational security measures.

We have put in place reasonable security measures to protect your personal information. However, no electronic transmission over the internet can be guaranteed 100% secure. Transmission of personal information to and from our services is at your own risk — only access the services within a secure environment.

8. Do we collect information from minors?

In short: We do not knowingly collect data from or market to children under 18.

By using our services, you confirm that you are at least 18 years old. If we learn that personal information from a minor has been collected, we will deactivate the account and delete the data promptly. To report such a case, contact us at octakey-interactive@outlook.fr.

9. What are your privacy rights?

In short: Depending on your location, you may have rights regarding your personal information.

In the EEA, UK, Switzerland, and Canada, you have the right to: access your data, request correction or erasure, restrict processing, request data portability, and object to automated decision-making. Contact us using the details in section 14.

To withdraw your consent at any time, email us at octakey-interactive@outlook.fr.

UK complaints: you may contact the Information Commissioner's Office — ico.org.uk/make-a-complaint — Helpline: 0303 123 1113.

10. Controls for Do-Not-Track features

No uniform technology standard for recognizing DNT signals has been finalized. We do not currently respond to DNT browser signals. If a standard is adopted in the future, we will update this notice accordingly. California law also requires us to note that we do not respond to DNT signals at this time.

11. Do United States residents have specific privacy rights?

In short: Residents of certain US states have additional rights regarding their personal information.

If you reside in California, Colorado, Connecticut, Delaware, Florida, and other listed states, you may have rights including: right to know, access, correct, delete, and opt out of the sale or sharing of your personal data.

To exercise your rights, submit a data subject access request or email us at octakey-interactive@outlook.fr.

We have not sold or shared any personal information in the past 12 months.

12. Do other regions have specific privacy rights?

Australia & New Zealand: We process your information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. You may request access or correction at any time.

Republic of South Africa: You may contact the Information Regulator at enquiries@inforegulator.org.za.

13. Do we make updates to this notice?

In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this notice periodically. The updated version will be indicated by a revised date at the top. We encourage you to review this notice regularly.

14. How can you contact us about this notice?

If you have questions or comments, contact us by email or post:

15. How can you review, update, or delete your data?

Based on the laws of your country or state, you may request access to, correction of, or deletion of your personal information. To do so, submit a data subject access request.